WHOAMI
- Robemar Aviles
Tryhackme
- View
Hack the box
- View
Academy HTB
- View
Over The Wire
- View
  - Bandit
    Level 0
    Level 1
    Level 2
    Level 3
    Level 4
    Level 5
    Level 6
    Level 7
    Level 8
    Level 9
    Level 10
    Level 11
    Level 12
Under The Wire
- View
PicoCTF
- View
Portswigger
- View
Hacker101
- View
  - Micro-CMS v1
  - Trivial
Python
- View
  - Files
    Number 1 to 100
  - Hackerrank
    Power - Mod Power
    Mod Divmod
    String Split and Join
    What's Your Name?
    Find the Runner-Up Score!
    Print Function
    Loops
    Division
    Arithmetic
    Python If-Else
    Hello World
SQL
- View
  - Hackerrank
    Higher Than 75 Marks
    Weather Observation Station 1
    Weather Observation Station 3
    Weather Observation Station 4
    Select By ID
    Select All
    Revising the Select Query II
    Revising the Select Query I
    Japanese Cities' Attributes
    Japanese Cities' Name
Notes
- View
Commands
- View
Google Chrome Password
- Decrypt Google Chrome Password
- LaZagne
Comptia Security+ 701
CCNA
Malware Analysis Lab
TCM

Powered by GitBook

On this page

TCM

Practical Web Hacking

XXE

Exploiting XXE via image file upload

PreviousLab: Exploiting XXE using external entities to retrieve files NextLab: Exploiting XInclude to retrieve files

Last updated 6 months ago

upload a svg file

intercept the request

send it to repeater

find a svg xxe payload

paste it in

view the svg with hostname

submit the hostname